Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/62ADD81CC38A11EC854BF13BC4F9AE02.roa
File: 62ADD81CC38A11EC854BF13BC4F9AE02.roa (raw, json)
Hash identifier: oRo5qcNfoy9CKpBfWEmKIuvqLc8S51+JiXhWhKJT+wI=
Subject key identifier: AB:9A:4C:D5:F8:7A:1D:74:DA:26:60:20:A0:9B:3C:0F:62:CE:8C:09
Certificate issuer: /CN=A9143135/serialNumber=FB80ECEF7474C3F24FCA8E518E679B2FCF351666
Certificate serial: 0208
Authority key identifier: FB:80:EC:EF:74:74:C3:F2:4F:CA:8E:51:8E:67:9B:2F:CF:35:16:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4Ds73R0w_JPyo5RjmebL881FmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/62ADD81CC38A11EC854BF13BC4F9AE02.roa
Signing time: Fri 01 Jul 2022 11:53:07 +0000
ROA not before: Fri 01 Jul 2022 11:53:07 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 147295
IP address blocks: 103.174.134.0/23 maxlen: 23
103.174.134.0/24 maxlen: 24
103.174.135.0/24 maxlen: 24
2001:df7:c780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143135/serialNumber=FB80ECEF7474C3F24FCA8E518E679B2FCF351666
Validity
Not Before: Jul 1 11:53:07 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62bee023-9e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:ba:d5:50:80:66:f6:5d:8d:ac:6a:0c:5a:
fd:34:dd:4b:2d:b5:2e:fd:b1:7f:a2:0f:22:7e:c9:
41:6b:60:f8:77:25:e0:38:ce:6d:18:eb:9b:82:52:
e3:2a:71:5c:a6:5a:57:79:c4:d9:43:75:e8:f8:c9:
8b:64:86:e4:35:2c:26:7c:73:26:06:d9:e8:23:70:
f2:70:46:6e:cb:f1:8d:db:62:5d:e9:36:78:16:f9:
79:e5:52:57:06:c5:7a:a4:75:24:39:3c:8c:c8:76:
2c:da:14:fd:b7:29:a1:10:04:34:e6:8b:27:fa:7e:
7f:a4:ea:59:59:f9:cb:3e:9c:ef:06:8f:f2:47:fc:
68:23:c4:23:ff:d4:a0:e3:de:ec:65:7d:62:ed:1d:
9a:c9:7f:75:43:95:91:a2:4c:0c:98:7c:96:42:2c:
5b:03:ac:9b:f0:e8:d9:83:1c:94:19:20:79:1c:1d:
53:de:7e:7d:57:b3:ae:7c:7f:90:52:69:2c:28:75:
29:63:43:7a:0c:38:a9:5c:ab:6f:d5:59:c5:ff:d4:
36:b4:ba:73:58:d1:70:df:2b:f6:30:0f:a6:06:b0:
62:1f:74:54:ac:a4:f8:16:71:79:9e:16:b4:16:95:
b2:fd:db:bc:24:8b:a7:99:d7:97:01:cc:b0:2f:3a:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:4C:D5:F8:7A:1D:74:DA:26:60:20:A0:9B:3C:0F:62:CE:8C:09
X509v3 Authority Key Identifier:
keyid:FB:80:EC:EF:74:74:C3:F2:4F:CA:8E:51:8E:67:9B:2F:CF:35:16:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/-4Ds73R0w_JPyo5RjmebL881FmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4Ds73R0w_JPyo5RjmebL881FmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143135/624F16522E1011ECAD3C6B6DC4F9AE02/62ADD81CC38A11EC854BF13BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.134.0/23
IPv6:
2001:df7:c780::/48
Signature Algorithm: sha256WithRSAEncryption
c5:eb:c0:21:67:d3:6a:86:e8:a7:b8:23:eb:d6:e2:a9:ac:40:
19:d7:5d:29:f0:0c:c9:b9:82:6a:92:50:0e:73:e2:33:d2:9f:
db:3d:b0:d1:a8:db:0a:09:9b:3a:7c:09:be:77:a8:aa:91:b9:
e0:5a:71:99:45:6b:4e:2f:9e:25:56:bf:90:c9:2e:c4:d9:7d:
b6:f5:20:0e:eb:65:2d:16:6e:e4:2a:09:79:00:be:1b:95:d9:
e5:63:2d:e4:13:22:fd:9c:8f:cd:71:62:6e:a6:b6:be:88:13:
d9:e6:bb:e0:8e:c5:5b:28:db:d2:f1:e6:07:f3:94:77:0c:e2:
3b:03:9d:0c:9c:cd:a6:82:ae:a7:94:ae:5c:46:87:ca:fa:05:
ac:cc:31:3e:23:23:b3:cd:67:93:5c:f3:0b:77:a7:54:e7:ee:
b9:de:de:41:3a:68:23:4f:16:06:7b:f1:91:14:3c:63:6f:63:
7a:4f:d2:e9:a3:8b:ef:99:3b:41:93:51:00:7c:30:a1:13:41:
99:ae:1a:be:28:e7:4f:56:59:a4:68:c5:c7:83:ae:90:ee:3d:
5d:77:87:0c:19:e4:fc:e5:05:08:0a:d5:4e:69:40:26:34:8e:
52:ca:a4:84:54:97:bb:81:5f:2c:45:18:53:ba:18:36:06:d7:
fd:77:7b:a7
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMxMzUxMTAvBgNVBAUTKEZCODBFQ0VGNzQ3NEMzRjI0RkNBOEU1MThFNjc5QjJG
Q0YzNTE2NjYwHhcNMjIwNzAxMTE1MzA3WhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJlZTAyMy05ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA81O61VCAZvZdjaxqDFr9NN1LLbUu/bF/og8ifslBa2D4dyXgOM5tGOubglLj
KnFcplpXecTZQ3Xo+MmLZIbkNSwmfHMmBtnoI3DycEZuy/GN22Jd6TZ4Fvl55VJX
BsV6pHUkOTyMyHYs2hT9tymhEAQ05osn+n5/pOpZWfnLPpzvBo/yR/xoI8Qj/9Sg
497sZX1i7R2ayX91Q5WRokwMmHyWQixbA6yb8OjZgxyUGSB5HB1T3n59V7OufH+Q
UmksKHUpY0N6DDipXKtv1VnF/9Q2tLpzWNFw3yv2MA+mBrBiH3RUrKT4FnF5nha0
FpWy/du8JIunmdeXAcywLzqT0wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKuaTNX4
eh102iZgIKCbPA9izowJMB8GA1UdIwQYMBaAFPuA7O90dMPyT8qOUY5nmy/PNRZm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzEzNS82MjRGMTY1MjJF
MTAxMUVDQUQzQzZCNkRDNEY5QUUwMi8tNERzNzNSMHdfSlB5bzVSam1lYkw4ODFG
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy00RHM3M1Iwd19KUHlvNVJqbWViTDg4MUZtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDMxMzUvNjI0RjE2NTIyRTEwMTFFQ0FEM0M2QjZEQzRGOUFFMDIvNjJBREQ4MUND
MzhBMTFFQzg1NEJGMTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnroYwDwQCAAIwCQMHACABDffHgDANBgkqhkiG9w0BAQsF
AAOCAQEAxevAIWfTaobop7gj69biqaxAGdddKfAMybmCapJQDnPiM9Kf2z2w0ajb
CgmbOnwJvneoqpG54FpxmUVrTi+eJVa/kMkuxNl9tvUgDutlLRZu5CoJeQC+G5XZ
5WMt5BMi/ZyPzXFibqa2vogT2ea74I7FWyjb0vHmB/OUdwziOwOdDJzNpoKup5Su
XEaHyvoFrMwxPiMjs81nk1zzC3enVOfuud7eQTpoI08WBnvxkRQ8Y29jek/S6aOL
75k7QZNRAHwwoRNBma4avijnT1ZZpGjFx4OukO49XXeHDBnk/OUFCArVTmlAJjSO
UsqkhFSXu4FfLEUYU7oYNgbX/Xd7pw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org